Introduction

When people think of cyberattacks, they often picture malware, phishing emails, or ransomware. Sometimes, though, attackers don’t need code to compromise an organization; they just need a convincing voice.

Voice phishing, or vishing, has been skyrocketing in the past two years, with a 170% rise in deepfake vishing in the latter half of 2025.

AI clones real voice audio to create a “deepfake,” which is a very good copy of someone’s speech patterns.

Introduction

Most people have heard of streaming services or subscription boxes, so you understand what they are and how they work. From phone plans to your favorite TV platform, many people subscribe to pay a regular fee (usually monthly or annually) to access some kind of content.

Introduction

Making purchases from your phone has become a massive trend in the past several years, especially during the 2020 pandemic when distance and ease were paramount concerns. Making fast, seamless transactions without the need to swipe, enter a PIN, or hand over your card allows you to get in and out of the store much more quickly.

Introduction

You’ve seen them everywhere, from restaurant menus to parking meters, flyers, and even on signs in your favorite cafés. Scanning a QR code is supposed to be easy and convenient. Since their widespread adoption during the 2020 pandemic, when everyone prioritized distance and hygiene, QR codes have been splashed across every city.

Introduction

When you hear “deepfake,” your might imagine fake celebrity pictures or convincing prank calls. Maybe you think about those AI tools that can “bring back” famous people as they would look today. However, deepfake technology has also infiltrated our workspaces and become a serious threat to our data privacy.

Introduction

In every workplace, cybersecurity awareness begins with a laundry list of rules: Avoid unknown links. Never share passwords. Don’t plug in unapproved devices.

These rules exist for a reason, of course. They form the foundation of how we protect company data and everybody in the office.

You’re three hours into a five-hour drive to visit family for the holidays. Your daughter asks, “Can I play Roblox on your laptop?” Your work laptop. The one with client files, financial data and access to your entire business. You’re exhausted from packing, you’ve got three more hours to go and, honestly, keeping her entertained sounds pretty good right now.

Even in good times, scammers circle around generosity. But during the holidays, when giving increases and emotions run high, they truly pounce.

A few years ago, a massive telefunding fraud was shut down after authorities discovered that the perpetrators had made 1.3 billion deceptive donation calls and collected over $110 million from unsuspecting donors.

Last December, an accounts payable clerk at a midsize company got an urgent text from her “CEO”: Buy $3,000 worth of Apple gift cards for clients, scratch the backs and e-mail the codes. It sounded odd, but the request came from the boss’s name, and it was peak holiday chaos.

Introduction

When you see a padlock icon on a website, or your company announces, “We’re fully compliant with XYZ standard,” it’s easy to feel safe. These signals are meant to reassure us that the other person takes security very seriously.